/*
* Copyright (c) 2008 Thierry Coppey, EPFL
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions are met:
*     * Redistributions of source code must retain the above copyright
*       notice, this list of conditions and the following disclaimer.
*     * Redistributions in binary form must reproduce the above copyright
*       notice, this list of conditions and the following disclaimer in the
*       documentation and/or other materials provided with the distribution.
*     * Neither the name of Thierry Coppey nor EPFL, nor the
*       names of its contributors may be used to endorse or promote products
*       derived from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THIERRY COPPEY AND EPFL ''AS IS'' AND ANY
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
* DISCLAIMED. IN NO EVENT SHALL THIERRY COPPEY OR EPFL BE LIABLE FOR ANY
* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/

#import <Cocoa/Cocoa.h>
#import "SnifferTreeNode.h"
// definitions
#include <netdb.h>
#import <net/bpf.h>
#import <net/ethernet.h>
#import <netinet/ip.h>
#import <netinet/tcp.h>
#import <netinet/udp.h>
#import <netinet/ip_icmp.h>
// #import <net/if_arp.h> 
// ...

@interface SnifferPacket : NSObject {
	void* packet; short p_len; // whole packet (buffer)
	u_char* data; short d_len; // real content
	//#define in_packet(p) (p>=packet&&p+sizeof(p)<=data+p_len)
	//#define in_data(p) (p>=data&&p+sizeof(p)<=data+d_len)
	// interpretation
	struct bpf_hdr* h_bpf;
	struct ether_header* h_eth;
	struct ip* h_ip;
	struct tcphdr* h_tcp;
	struct udphdr* h_udp;
	struct icmp* h_icmp;
	// struct arphdr* h_arp;
	// ...

}

+(void)cleanup; // call before the software closes

-(id)initWith:(const void*) bytes;
+(id)packetWith:(const void *)bytes;

- (NSString*) transport;	// level 3/4 network/transport
- (NSString*) source;		// source as arp/ip/ip:port
- (NSString*) destination;	// destination
- (NSString*) protocol;		// level 5 session
- (NSString*) time:(bool)full;	// time of the packet
- (NSData*) content:(SnifferTreeNode*)tree; // data about packet

// private : useful methods
- (NSString*) hostMAC:(bool)dst;
- (NSString*) hostAddr:(bool)dst;
- (NSString*) hostName:(bool)dst;
- (NSString*) hostPort:(bool)dst;

// private : decoding methods
-(void)decodeIP:(SnifferTreeNode*)tree;
-(void)decodeTCP:(SnifferTreeNode*)tree;
-(void)decodeUDP:(SnifferTreeNode*)tree;
-(void)decodeICMP:(SnifferTreeNode*)tree;
@end